WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling
CVE-2021-34568

7.5HIGH

Key Information:

Vendor: Wago
Status: 750-81xx/xxx-xxxfw; 750-82xx/xxx-xxx; 752-8303/8000-0002; 762-4xxx
Vendor: CVE Published:; 9 November 2022

Summary

In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet containing OS commands to provoke a denial of service.

Affected Version(s)

750-81xx/xxx-xxxFW FW1

750-82xx/xxx-xxx FW1

752-8303/8000-0002 FW1

References

https://cert.vde.com/en/advisories/VDE-2020-036/

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Nov 9, 2022
Vulnerability Reserved
Jun 10, 2021

Credit

These vulnerabilities were reported to WAGO by Uri Katz of Claroty.

.